Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File:                     NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier:          KS2GqZz/4VCsLIwLm+AiGejCwr9do61eXrRlsPzad7w=
Subject key identifier:   06:F6:F2:1A:A1:00:38:DE:53:C4:8A:F2:B0:8F:DD:AE:A0:87:79:B9
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer:       /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial:       019234DBE4EE0BC431D2510E5D04793D9357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number:          12E1
Signing time:             Fri 27 Sep 2024 19:01:19 +0000
Manifest this update:     Fri 27 Sep 2024 19:01:19 +0000
Manifest next update:     Sat 28 Sep 2024 19:01:19 +0000
Files and hashes:         1: 0pZdrwiUbu96CHzscHdakkRwuPw.roa (hash: 5EJQWcCSWrqeeYPTfj8eMpVbPmALGYhAq0+GLxC5ySU=)
                          2: 1_PDee4wFs-yRl8LJhTYnKxoGXU.roa (hash: shnb45E6VLdlmPbpDvMp7nFmvyY0hDuyWlY2RohIuqw=)
                          3: 7_O0ZzsK1w5RRFNFuBHol41p94U.roa (hash: V+0vpguLz4PKF5N7a7KIsP5pnVLjeX21KLBQ6QtEFRk=)
                          4: 86hG3shlfKdUSvkVBOCwgUfnFak.roa (hash: g6hFGZB5sjfd6uG+fw6dsamoiAjOAVOgtyEoTXA5WQA=)
                          5: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: WT3sETDgsYhX6IaWdjXFSxRnU1P3S02uaecIq4v+BTw=)
                          6: Q2-sQnLsuAPtuHrO-bGzXxyUoTo.roa (hash: g74M2o/fvtFZBcFjqYZ6hezOWYRJbsJmGZ6wZ+OouRY=)
                          7: VfH-jZ8cOKD7VbgrpYKaCm7sfwg.roa (hash: YKAGL5PCKD5l8c8jAf3LNU8r4oZFr4gcsZJNcdEIiLs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:db:e4:ee:0b:c4:31:d2:51:0e:5d:04:79:3d:93:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
        Validity
            Not Before: Sep 27 19:01:19 2024 GMT
            Not After : Sep 28 19:01:19 2024 GMT
        Subject: CN=06f6f21aa10038de53c48af2b08fddaea08779b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:52:ae:ce:bc:f7:c9:23:af:64:4f:3e:fb:b0:
                    09:5c:cc:07:fd:bd:6e:1a:39:f4:3c:44:45:04:1e:
                    b2:e8:dc:c8:c5:f9:98:ac:59:a9:be:53:af:0a:a6:
                    dc:85:9d:9d:57:bc:c4:7b:5f:7d:d0:56:51:03:e8:
                    ab:68:d4:5b:b1:fc:9c:43:1d:8b:95:0e:02:69:ec:
                    42:d5:46:51:07:25:ec:72:be:10:19:9f:7f:cd:a9:
                    d3:1c:4a:54:67:21:1c:7f:97:5f:6e:8d:96:20:d3:
                    d5:4a:2a:6f:86:ed:4e:e2:fb:0b:5d:a7:88:9d:d0:
                    db:d9:ab:e2:60:4a:49:d8:8d:a1:90:08:12:e3:07:
                    7d:34:87:4c:06:fe:6f:ad:a6:8f:02:80:07:b0:b9:
                    96:67:86:df:ec:ab:28:5c:76:69:79:13:21:16:bb:
                    89:cd:69:fa:83:47:5d:ce:f5:40:e6:9f:1e:9a:32:
                    07:ce:c9:2a:5a:4e:6e:ca:e2:4c:1b:48:3b:b6:37:
                    ba:7b:0e:17:eb:db:48:70:da:49:ce:ff:76:73:26:
                    9c:6b:ef:21:c2:2d:5c:bd:ad:c2:b7:cb:52:f1:27:
                    e5:40:e8:23:ba:1a:ec:a4:59:20:7c:81:ac:cc:5d:
                    b0:38:1b:d5:d7:08:e2:c0:01:64:98:e7:19:8c:cf:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F6:F2:1A:A1:00:38:DE:53:C4:8A:F2:B0:8F:DD:AE:A0:87:79:B9
            X509v3 Authority Key Identifier:
                keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a2:0a:da:dd:c8:23:84:19:09:ae:86:d9:cf:0b:70:41:d1:
         35:70:ee:2b:c3:a7:99:cf:c2:45:43:a0:d9:ba:86:a3:1b:30:
         a2:20:01:1c:62:c7:6d:f5:aa:be:36:66:a7:52:aa:53:d5:40:
         0f:66:bb:80:96:36:6c:bf:ee:60:51:a2:37:0d:2a:92:dc:ea:
         16:19:83:d0:d7:c0:ca:13:64:ee:8e:1c:e5:ba:b1:8f:ec:72:
         37:d7:04:99:93:6f:3b:b1:b2:ac:7e:fa:1d:4c:ac:c5:ff:3f:
         03:81:c5:08:78:30:31:12:36:68:d5:24:d1:ce:76:08:c5:20:
         01:17:34:bd:ee:e4:d8:71:52:01:3c:97:55:e5:54:1b:62:45:
         59:20:9f:c6:8e:fe:c5:80:d1:4e:dc:aa:e4:dd:21:89:e3:89:
         9b:f7:eb:3e:fb:39:4d:76:b9:ae:c3:8e:fb:cd:1d:3f:aa:5a:
         72:c7:0c:75:7f:04:13:b1:0c:15:03:13:52:26:24:ab:2c:c2:
         d2:a1:fc:ef:8f:6a:f7:7b:e0:a1:f8:3d:e7:bc:ca:a4:2b:ac:
         09:8e:ff:2e:c4:1c:b3:28:9c:6a:1b:d7:8d:f2:f8:02:5c:91:
         32:99:db:12:89:c3:7c:a2:88:44:6f:8a:89:18:e7:28:d7:ce:
         d4:a0:91:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:20:24 2024 by rpki-client on console-fra.rpki-client.org